Wwireapp

Products

Exploited and recent CVEs

• CVE-2026-35049 Medium 6.5 wire-ios has Persistent Remote DoS via Integer Underflow 0.2%
• CVE-2025-49846 Medium 4.1 wire-ios accidentally logs message contents 0.2%
• CVE-2025-48066 Medium 6.0 wire-webapp has no database deletion on client logout 0.1%
• CVE-2025-48061 Medium 5.6 wire-webapp Has Insufficient Session Invalidation after User Logout 0.1%
• CVE-2023-48221 High 7.3 wire-avs remote format string vulnerability 0.9%
• CVE-2023-22737 Medium 6.5 wire-server vulnerable to unauthorized removal of Bots from Conversations 0.7%
• CVE-2022-39380 Medium 5.3 wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering 0.6%
• CVE-2022-31122 Critical 9.8 Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creation 0.7%
• CVE-2022-29168 Critical 9.6 Cross Site Scripting in Wire Messages 0.9%
• CVE-2022-31009 Medium 5.7 DoS vulnerability: Invalid Accent Colors 0.7%
• CVE-2022-24799 Critical 9.6 Cross Site Scripting in Wire Webapp 1.0%
• CVE-2021-41119 Medium 5.3 DoS vulnerabiliity in wire-server json parser 1.4%
• CVE-2022-23610 Critical 9.1 Improper Verification of Cryptographic Signature in wire-server 0.7%
• CVE-2022-23625 Medium 6.5 DoS vulnerability: Malformed Resource Identifiers 1.2%
• CVE-2021-41193 Critical 9.8 Use of Externally-Controlled Format String in wire-avs 2.5%
• CVE-2022-23605 Medium 4.4 Expired Ephemeral Messages not reliably removed in wire-webapp 0.3%
• CVE-2021-41100 High 7.4 Account takeover when having only access to a user's short lived token in wire-server 0.9%
• CVE-2021-41094 Medium 4.2 Mandatory encryption at rest can be bypassed (UI) in Wire app 0.2%
• CVE-2021-41093 High 7.4 Account takeover when having only access to a user's short lived token 1.5%
• CVE-2021-41101 Medium 5.7 CORS `Access-Control-Allow-Origin` settings are too lenient 0.7%
• CVE-2021-32755 Medium 5.4 Certificate pinning is not enforced on the web socket connection 0.3%
• CVE-2021-32683 High 8.8 XSS through createObjectURL 0.8%
• CVE-2021-21382 High 8.6 Unsafe loopback forwarding interface in Restund 1.5%
• CVE-2021-32666 Medium 6.5 Asset DoS vulnerability 0.9%
• CVE-2021-32665 High 8.8 Verified groups not reliable 0.5%
• CVE-2021-21400 High 7.1 Entering code in App Lock modal sends input to conversation 1.2%
• CVE-2021-21396 Medium 6.5 Bulk list client endpoint exposes too much metadata about a client 1.2%
• CVE-2021-21301 Low 2.6 Video feed was captured while user has disabled video 1.0%
• CVE-2020-15258 High 8.0 Insecure use of shell.openExternal in Wire 2.1%